At KLC Aduanas we process your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), Ley Orgánica 3/2018 (LOPDGDD, the Spanish Data Protection Act) and Ley 34/2002 (LSSI-CE, the Spanish Information Society Services Act). Here we explain clearly what data we process, for what purposes and what your rights are.
1. Controller
- ControllerAnja Petra König
- Trading nameKLC Aduanas (König Logistic Canarias)
- NIF (tax ID)X0749705C
- AddressCalle Botavara, 3 · 38670 Adeje (Santa Cruz de Tenerife)
- Emailklcaduanas@gmail.com
- Phone+34 922 39 74 27
We have not appointed a data protection officer because we are not required to do so. For any privacy questions, please write to us at the email address above.
2. What data we process
- Contact details and details of your enquiry that you give us via WhatsApp, phone or email: name, phone number, email address, country of origin, type of shipment and the content of your message.
- Data needed to provide the service, if you engage us: identification (DNI, NIE or passport), address, tax details, municipal registration (empadronamiento) or deregistration in your country of origin, invoices, inventories and documentation relating to the goods, vehicle or boat.
- Technical browsing data logged by our hosting provider (Cloudflare) for security purposes: IP address, date and time, page requested and browser type.
- Analytics and advertising data, only if you give your consent in the cookie banner (see the Cookie policy).
- Preferences (language, country of origin and your cookie choice), which are stored only in your browser and never reach us.
Website form: when you submit it, we store in our database (Cloudflare D1 with EU jurisdiction: the data is stored and processed in the European Union) the details you enter – name, phone number if you provide one, country of origin, type of shipment and message – together with the language, the page you are writing from and, where applicable, the name of the website that brought you to us. This lets us answer you and follow up on your enquiry. If you choose WhatsApp, a message also opens in your WhatsApp and you decide whether to send it; if you choose “Call me back”, we call you on the number you provide.
Click count: we anonymously count clicks on the WhatsApp and call buttons (button, page, language and chosen country of origin), without cookies or identifiers, to see what works on the website.
Abuse prevention: to stop mass submissions and abuse of the form, the click count and access to the internal panel, we keep for no more than 24 hours a pseudonymised value (keyed hash) derived from your IP address. The IP address itself is not stored.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your enquiries and preparing quotes | Taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and legitimate interest in responding to enquiries received (Art. 6(1)(f) GDPR) |
| Providing the customs, logistics and tax services you have engaged us for | Performance of a contract (Art. 6(1)(b) GDPR) |
| Complying with legal obligations (customs, tax and accounting) | Legal obligation (Art. 6(1)(c) GDPR) |
| Keeping the website secure and preventing abuse | Legitimate interest (Art. 6(1)(f) GDPR) |
| Analysing use of the website (Google Analytics 4, Microsoft Clarity) | Your consent (Art. 6(1)(a) GDPR) |
| Measuring and improving our advertising (Google Ads, Meta pixel) | Your consent (Art. 6(1)(a) GDPR) |
We do not send newsletters or commercial communications. If we were to do so in future, we would ask for your prior consent, except in the cases permitted by Article 21(2) LSSI-CE.
We do not make automated decisions or carry out profiling that produces legal effects concerning you.
4. Recipients
- Public authorities where required by law or necessary for your operation: Agencia Estatal de Administración Tributaria (Spanish Tax Agency – Customs), Agencia Tributaria Canaria (Canary Islands Tax Agency) and Dirección General de Tráfico (Spanish traffic authority), among others.
- Carriers, shipping lines, freight forwarders and warehouses involved in your shipment, to the extent necessary to carry it out.
- Providers that process data on our behalf (processors): Cloudflare, Inc. (web hosting, enquiry database and security) and Google (email).
- Analytics and advertising tools, only with your consent: Google Ireland Ltd. (Google Analytics 4, Google Ads), Microsoft Ireland Operations Ltd. (Clarity) and Meta Platforms Ireland Ltd. (Meta pixel).
- WhatsApp: if you write to us via WhatsApp, WhatsApp Ireland Ltd. (Meta) processes your data in accordance with its own privacy policy.
- Professional advisers bound by a duty of confidentiality, where applicable.
5. International transfers
Some providers (Google, Microsoft, Meta and Cloudflare) may process data in the United States. These companies participate in the EU‑US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023) or apply standard contractual clauses approved by the Commission.
Where your shipment comes from a country outside the European Economic Area (for example, the United Kingdom, the USA or China), we share with the parties involved in that country the data strictly necessary to carry out the transport and customs clearance, in accordance with Article 49(1)(b) GDPR. The United Kingdom is also covered by an adequacy decision.
6. Retention periods
- Enquiries and quotes that do not lead to a contract (including those received through the form): up to 12 months; they are then deleted automatically. Automated submissions detected as spam are deleted after 30 days. Technical backups of the database are overwritten within 30 days at most.
- Pseudonymised value of the IP address for abuse prevention: no more than 24 hours.
- Client data: for the duration of the relationship and thereafter for the statutory retention and limitation periods (generally up to 6 years under the Código de Comercio – the Spanish Commercial Code – and tax and customs legislation).
- Analytics data: 14 months in Google Analytics 4; other data as set out in the Cookie policy.
- Cloudflare technical logs: the minimum time necessary for security purposes, according to the provider’s configuration.
7. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent without affecting the lawfulness of processing carried out before its withdrawal. Write to us at klcaduanas@gmail.com stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you to prove it. We will respond within one month.
If you believe that we have not handled your rights properly, you can lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (C/ Jorge Juan, 6, 28001 Madrid · www.aepd.es).
You can change or withdraw your consent to cookies whenever you like:
8. Do you have to provide your data?
To respond to your enquiry, we need at least one way of contacting you. To provide the customs service, the law requires certain data and documents; if you do not provide them, we will not be able to carry out the operation.
9. Minors
Our services are not aimed at persons under the age of 14, and we do not knowingly process their data.
10. Security
We apply technical and organisational measures appropriate to the risk (HTTPS encryption, access control and providers offering sufficient guarantees) to protect your data against loss, unauthorised access or alteration.
11. Changes to this policy
We may update this policy to reflect changes in the law or in our services. We will always publish the current version on this page, together with the date it was last updated.